Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
File: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft (raw, json)
Hash identifier: n4qI4i/J4h8Pmu7aziuWaJ/IKlugC8rFPFuRrPI/qqo=
Subject key identifier: 37:6C:2D:A4:29:F1:8C:9A:86:B6:EC:B1:59:1F:0E:6F:A6:26:31:D0
Authority key identifier: 34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
Certificate issuer: /CN=345eecab9570cf0affa81be748e9128f55e416c2
Certificate serial: 01A17D777ED97A7A562FAA29C1A4F54C475C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
Manifest number: 0A21
Signing time: Tue 27 Oct 2026 13:05:45 +0000
Manifest this update: Tue 27 Oct 2026 13:05:45 +0000
Manifest next update: Wed 28 Oct 2026 13:05:45 +0000
Files and hashes: 1: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl (hash: YxCb8GRLgecZmUAFBzM4rHtEFY75Yri+r1a8nhsIlg8=)
2: wsOEUVyk9sIlg5MKRUH0wpTjaw8.roa (hash: 6f/bUq3GwOXqxVf+jY/soqtnaHNxSvKd1I9oz4aw3R8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:77:7e:d9:7a:7a:56:2f:aa:29:c1:a4:f5:4c:47:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345eecab9570cf0affa81be748e9128f55e416c2
Validity
Not Before: Oct 27 13:05:45 2026 GMT
Not After : Oct 28 13:05:45 2026 GMT
Subject: CN=376c2da429f18c9a86b6ecb1591f0e6fa62631d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2d:c2:bd:df:72:47:4a:5b:43:99:a6:a4:cf:
17:60:19:01:5b:a5:46:aa:9f:84:8b:db:4c:29:a6:
05:81:4b:a0:5f:c5:8f:f6:09:ed:c8:69:84:f7:1d:
1a:53:e3:f1:df:f2:5c:45:68:62:4a:ae:ad:43:7a:
71:39:ae:9e:d3:66:3d:92:33:20:b3:72:07:d3:f0:
4e:3a:e6:cf:a2:3d:40:83:84:29:53:20:e3:12:80:
35:d9:f7:89:3f:65:df:48:91:94:83:75:95:f4:3a:
96:20:7a:9c:6a:16:71:e2:d3:06:67:40:89:ae:c3:
d0:a3:77:ca:ea:69:07:0f:cb:fa:fc:f3:9f:9e:45:
4b:d1:06:eb:5a:66:fe:76:00:3e:84:9e:fc:66:23:
33:6e:f8:41:b2:9f:d0:d9:f9:e8:21:30:44:27:db:
cf:78:17:7e:63:2b:24:89:5c:68:66:20:f6:66:4c:
e6:64:59:8e:3b:f5:bf:8f:8b:3e:ca:8f:af:e6:73:
bd:db:49:98:e7:68:a5:8d:5c:c5:1a:d4:96:e9:4e:
d9:eb:a7:ec:e9:9b:24:56:fa:5b:f3:35:dc:80:cd:
c3:6a:4e:a2:93:a0:65:09:68:a2:d4:45:4c:54:da:
25:78:60:07:c3:84:ee:66:82:44:63:c8:30:1e:69:
49:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6C:2D:A4:29:F1:8C:9A:86:B6:EC:B1:59:1F:0E:6F:A6:26:31:D0
X509v3 Authority Key Identifier:
keyid:34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b2:eb:75:29:1b:f2:80:65:84:55:fc:a0:04:c5:c6:5e:74:
62:db:db:f3:f5:76:d9:f6:3a:fc:f1:2a:d6:41:24:dd:82:95:
5f:2b:fd:22:48:32:af:12:ce:c7:9f:05:13:83:7d:29:60:de:
c1:20:09:6d:66:50:50:e2:47:ec:db:b1:78:7f:a2:5f:77:27:
ef:a4:99:44:3b:44:9e:8d:ae:6e:fa:6e:56:2d:f2:8d:cb:63:
3f:5e:c4:35:49:8b:ae:1b:89:ce:ca:e3:6c:78:c0:6b:b2:a9:
b1:43:de:d2:44:2d:52:4d:1c:df:60:00:fb:97:90:f7:5a:07:
fa:39:d5:9c:ac:26:a0:f9:ac:30:d4:e7:c5:eb:9a:eb:e9:1a:
c8:65:30:8d:92:34:b0:f8:28:20:41:93:00:37:91:1e:0e:57:
03:39:33:e7:6b:eb:ce:bc:09:39:9a:c3:6c:fc:50:77:bd:c0:
24:fb:c0:75:35:5e:90:f9:52:61:88:17:9c:e3:a7:ab:61:8a:
64:8a:fc:ac:44:17:c4:3d:1f:d0:ab:66:60:cd:1c:33:3d:19:
09:d7:4f:97:56:c0:20:f0:02:0f:9a:6f:f8:cf:55:8f:73:1f:
c3:95:c2:3b:3e:85:11:45:94:42:f3:48:36:72:9e:21:e4:ba:
2d:35:f3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:46:21 2026 by rpki-client